Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kCl9gQe3jTgLATsvb5xTWjUNgNo.roa
File: kCl9gQe3jTgLATsvb5xTWjUNgNo.roa (raw, json)
Hash identifier: wkGBP9Ji70hOu0d5Ph0ws1VcGV/LjNQdK4Ugd3PaZ7k=
Subject key identifier: 90:29:7D:81:07:B7:8D:38:0B:01:3B:2F:6F:9C:53:5A:35:0D:80:DA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CB7AC52F6271E5C483DA6AE6053C86F62
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kCl9gQe3jTgLATsvb5xTWjUNgNo.roa
Signing time: Wed 04 Mar 2026 07:07:29 +0000
ROA not before: Wed 04 Mar 2026 07:07:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.41.0/24 maxlen: 24
151.247.44.0/24 maxlen: 24
151.247.45.0/24 maxlen: 24
151.247.47.0/24 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.75.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.78.0/24 maxlen: 24
151.247.82.0/24 maxlen: 24
151.247.91.0/24 maxlen: 24
151.247.94.0/24 maxlen: 24
151.247.102.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.231.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 07:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:ac:52:f6:27:1e:5c:48:3d:a6:ae:60:53:c8:6f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 4 07:07:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90297d8107b78d380b013b2f6f9c535a350d80da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f1:ae:1e:5c:60:f6:63:39:5b:7d:08:5c:0d:
4b:13:55:54:9f:0d:2a:6a:7b:b3:90:27:e2:4f:6d:
7b:79:1c:33:2a:3d:3f:ef:4f:b5:95:2d:f4:ac:16:
cb:72:0d:7b:f3:79:3d:5b:bc:64:b8:49:76:34:58:
ed:2d:dd:d8:40:16:db:8d:57:b2:68:b8:a2:d6:c7:
08:ce:65:d3:e8:36:76:65:2a:10:2d:31:d4:90:f9:
33:aa:7f:9e:02:21:90:66:a0:08:b1:11:5e:2d:fc:
48:3d:75:6c:b5:ac:f0:44:e6:28:7b:07:93:e3:6d:
6f:2a:bd:03:69:5f:4e:f0:c0:84:02:73:55:c2:7f:
ac:5c:5d:84:65:7f:8a:d5:88:e6:59:7a:7c:de:d4:
b2:e3:5e:a7:c0:65:88:db:96:01:cd:63:36:9e:32:
39:79:92:a6:69:2d:b4:32:40:26:57:00:65:c3:e8:
be:04:f7:20:3d:29:24:e9:0b:be:fb:eb:cd:60:75:
0f:ac:59:fc:37:f7:15:d6:e8:ca:42:13:ea:b4:95:
45:93:a9:86:89:df:ee:5a:c2:3d:5e:ec:d2:d8:b1:
08:a2:9a:21:99:d6:58:7e:35:f4:5c:96:23:cb:05:
b1:91:f2:4a:c3:a4:dd:f1:8b:55:99:c2:c1:05:b3:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:29:7D:81:07:B7:8D:38:0B:01:3B:2F:6F:9C:53:5A:35:0D:80:DA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kCl9gQe3jTgLATsvb5xTWjUNgNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.8.0/23
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.41.0/24
151.247.44.0/23
151.247.47.0-151.247.48.255
151.247.75.0/24
151.247.77.0-151.247.78.255
151.247.82.0/24
151.247.91.0/24
151.247.94.0/24
151.247.102.0/24
151.247.133.0-151.247.135.255
151.247.231.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
56:41:1b:69:65:3d:ca:1f:08:7e:23:d0:13:57:3b:2e:e4:4f:
2c:bc:7b:fe:4c:d4:96:b0:2d:45:03:82:20:29:10:96:86:96:
0d:25:95:3c:7b:ec:7a:1e:27:3e:48:6f:ca:67:04:31:ff:46:
e7:c8:1b:ff:87:0d:0d:09:6b:36:a2:96:71:12:dd:85:8e:55:
ae:6e:f0:06:7e:77:ff:17:18:a0:27:de:d8:14:6e:ab:de:8b:
24:89:78:d7:10:2a:f3:30:cf:7c:c3:88:a1:20:62:e1:4c:b9:
b6:24:a0:05:95:28:04:74:1a:68:82:8b:0b:6e:57:05:36:53:
65:2c:36:2d:8e:bd:70:54:87:ba:10:3f:e9:9e:25:63:a4:91:
21:1d:ec:ea:36:21:ea:32:b0:17:7d:dd:fb:a6:7a:5c:9c:99:
3e:92:26:9a:ea:a2:98:7c:f1:01:35:bb:f8:bd:ff:0e:e3:30:
e5:3d:5a:2b:10:e1:d3:ee:43:73:d9:84:65:b6:77:d4:11:59:
38:d5:78:87:14:b8:d7:a2:24:b2:7c:58:73:2b:9d:f0:68:0d:
13:d5:f9:91:5a:76:d9:aa:19:a1:0d:0a:97:89:e4:25:a5:dc:
eb:bd:10:42:84:7c:5d:93:4d:2a:f9:32:5c:26:d4:f9:b7:ec:
c1:1d:4b:20
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgISAZy3rFL2Jx5cSD2mrmBTyG9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMzA0MDcwNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDI5N2Q4MTA3Yjc4ZDM4MGIwMTNiMmY2ZjljNTM1YTM1MGQ4MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/GuHlxg9mM5W30IXA1LE1VUnw0q
anuzkCfiT217eRwzKj0/70+1lS30rBbLcg1783k9W7xkuEl2NFjtLd3YQBbbjVey
aLii1scIzmXT6DZ2ZSoQLTHUkPkzqn+eAiGQZqAIsRFeLfxIPXVstazwROYoeweT
421vKr0DaV9O8MCEAnNVwn+sXF2EZX+K1YjmWXp83tSy416nwGWI25YBzWM2njI5
eZKmaS20MkAmVwBlw+i+BPcgPSkk6Qu+++vNYHUPrFn8N/cV1ujKQhPqtJVFk6mG
id/uWsI9XuzS2LEIopohmdZYfjX0XJYjywWxkfJKw6Td8YtVmcLBBbPfbwIDAQAB
o4IC3jCCAtowHQYDVR0OBBYEFJApfYEHt404CwE7L2+cU1o1DYDaMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEva0NsOWdRZTNqVGdMQVRzdmI1eFRXalVOZ05vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DCB3QQCAAEwgdYDBASX
8IADBACX8JEDBACX8KswDAMEAJfxaQMEApfxaAMEApfxhAMEAJfyOAMEAZfyRgME
AJfyhwMEAZfzCAMEAZfzzAMEAJf0OAMEAJf1AgMEAJf1FgMEApf1OAMEAJf1uTAM
AwQAl/W7AwQAl/W8AwQDl/YIAwQAl/cpAwQBl/csMAwDBACX9y8DBACX9zADBACX
90swDAMEAJf3TQMEAJf3TgMEAJf3UgMEAJf3WwMEAJf3XgMEAJf3ZjAMAwQAl/eF
AwQDl/eAAwQAl/fnAwQAl/f4MA0GCSqGSIb3DQEBCwUAA4IBAQBWQRtpZT3KHwh+
I9ATVzsu5E8svHv+TNSWsC1FA4IgKRCWhpYNJZU8e+x6Hic+SG/KZwQx/0bnyBv/
hw0NCWs2opZxEt2FjlWubvAGfnf/FxigJ97YFG6r3oskiXjXECrzMM98w4ihIGLh
TLm2JKAFlSgEdBpogosLblcFNlNlLDYtjr1wVIe6ED/pniVjpJEhHezqNiHqMrAX
fd37pnpcnJk+kiaa6qKYfPEBNbv4vf8O4zDlPVorEOHT7kNz2YRltnfUEVk41XiH
FLjXoiSyfFhzK53waA0T1fmRWnbZqhmhDQqXieQlpdzrvRBChHxdk00q+TJcJtT5
t+zBHUsg
-----END CERTIFICATE-----
Generated at Wed Mar 4 16:03:46 2026 by rpki-client